{"id":"W4388197345","doi":"10.1145/3630253","title":"On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications","year":2023,"lang":"en","type":"article","venue":"ACM Transactions on Privacy and Security","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":8,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"JavaScript; Unobtrusive JavaScript; Computer science; Vulnerability (computing); Computer security; Web application; Exploit; Source code; Rich Internet application; World Wide Web; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005988008,0.000184691,0.0001960935,0.000569907,0.0006646045,0.0001759441,0.0005064443,0.00007626368,0.00001464676],"category_scores_gemma":[0.00009231679,0.0002018189,0.00005037295,0.001469916,0.00008098951,0.0005732981,0.00006970834,0.000454774,0.00006016994],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008174897,"about_ca_system_score_gemma":0.0000403057,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003232396,"about_ca_topic_score_gemma":0.0007492179,"domain_scores_codex":[0.9983485,0.000110001,0.0003164982,0.0006474528,0.0002493158,0.000328259],"domain_scores_gemma":[0.9979365,0.0007615705,0.00005668133,0.001058717,0.00005534498,0.0001311905],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0001496855,0.00181677,0.007776129,0.0006200153,0.0001882909,0.000021389,0.04400631,0.004376498,0.003716498,0.4744529,0.0009544484,0.4619211],"study_design_scores_gemma":[0.002501614,0.0003514533,0.0376243,0.0002216147,0.00005425758,0.00003853198,0.003397396,0.03762689,0.01402751,0.8682612,0.03446897,0.001426269],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6343691,0.00009779556,0.3577472,0.003877279,0.0001743877,0.0008696748,0.00002608085,0.0009715503,0.001866947],"genre_scores_gemma":[0.9964333,0.000185494,0.002181459,0.0001599403,0.00002422121,0.0006909474,0.000003858715,0.00001514272,0.0003057052],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.4604948,"threshold_uncertainty_score":0.8229938,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04782383807613454,"score_gpt":0.2753988203095273,"score_spread":0.2275749822333928,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}